OSV
Vulnerability records linked to package versions
What it does
OSV provides public vulnerability data and query interfaces, using structured records to describe affected packages, versions, and fix information across supported ecosystems and their package identifiers as represented in the database’s maintained vulnerability entries.
When to use it
When investigating dependency risk, inspect package and vulnerability entries and compare their affected-version ranges with the project’s lockfile.
